No more typing reviews! Try our Samantha, our new voice AI agent.

Illumio Insights vs NetWitness NDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Illumio Insights
Ranking in Network Detection and Response (NDR)
20th
Average Rating
9.6
Reviews Sentiment
1.8
Number of Reviews
4
Ranking in other categories
Microsegmentation Software (6th), Cloud Detection and Response (CDR) (11th)
NetWitness NDR
Ranking in Network Detection and Response (NDR)
19th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (47th), Threat Intelligence Platforms (TIP) (34th), Endpoint Detection and Response (EDR) (57th), Security Orchestration Automation and Response (SOAR) (22nd), Extended Detection and Response (XDR) (40th)
 

Featured Reviews

EM
Manager at OOCL
Micro-segmentation has improved threat visibility and supports ongoing zero-trust monitoring
Deployment of Illumio Insights was not difficult, but the difficulty depends on how micro your design is. For Docker containers, it is not quite suitable for that kind of application traffic. For container architectures, it is not quite designed that way. For normal VMs it might be acceptable, but for container architectures, I cannot be as micro-segmented as I want to be. Illumio Insights is not very well designed for containers, which is one of the drawbacks and weak sides of the product. I use Illumio Insights' real-time analytics for micro-segmentation, and beyond zero-trust monitoring, I also want to do analysis. However, the product coverage is not very broad, so I have to do my own filtering and analysis, and integration with other tools is necessary. The reporting and analysis are not ready out of the product itself. Reporting is another area for improvement in this product and is not very sufficient, so I have to further integrate or do it on my own. Illumio Insights is stable and a mature product. The functionality, such as reporting and analysis, may extend in the roadmap, but it has not in the past. The current functionality is adequate and quite mature, which is how I chose it based on maturity and market share. However, it is not very modern for Kubernetes and containers. If this functionality can extend, that would be a valuable roadmap addition. Streamline integration with Illumio Insights does not help me much since it does not require too much integration with my other operations.
reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Reliable and good support but can be expensive
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to not only rely on the intelligence of the engineer in charge but to have some threat intelligence and some seeds of IOCs and to have the host have some artificial intelligence to reduce the number of false positives. I don't see this solution being very scalable. The solution is pricey.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution has contributed to quick detection of risky traffic and offers one-click containment."
"Illumio Insights is stable and a mature product."
"One of the most valuable features is the ability to map traffic and patterns over multiple hyperscalers, not just AWS."
"Illumio Insights impressed me with its ease of use, clarity, and potential to significantly improve breach containment strategies."
"I would recommend others to use RSA NetWitness Endpoint at this time because they have evolved from an MD to an EDR solution to an XDR solution."
"The interface of this solution is very flexible and easy to use."
"In my opinion, this is the best platform, world-wide, and I am happy with it."
"It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great."
"The solution is stable."
"This solution allows us to locate the malware in real-time."
"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."
"NetWitness Endpoint has enabled us to detect attacks that bypass the first stage of cybersecurity, like zero-day and advanced attacks."
 

Cons

"There is room for improvement with more AI-based detection to report traffic abnormalities and potential issues."
"In some of the views, an IP address appears to be a link, but it doesn't open any new windows or display any new information."
"Illumio Insights is not very well designed for containers, which is one of the drawbacks and weak sides of the product."
"The initial setup requires a high level of skill, then the setup is good and smooth."
"RSA NetWitness Endpoint is a scalable solution. However, the problem which we normally face is in terms of the migration of the solution."
"The solution doesn't have a reporting engine which would be helpful."
"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."
"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The contamination feature could be improved."
 

Pricing and Cost Advice

Information not available
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"We are on a three-year contract to use RSA NetWitness Network."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"It is highly scalable. It can be bought based on your requirements."
"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
11%
Outsourcing Company
10%
Comms Service Provider
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise6
 

Questions from the Community

What needs improvement with Illumio Insights?
Deployment of Illumio Insights was not difficult, but the difficulty depends on how micro your design is. For Docker containers, it is not quite suitable for that kind of application traffic. For c...
What is your primary use case for Illumio Insights?
Illumio Insights plays its own role in enhancing threat visibility. Illumio Insights performs micro-segmentation according to the traffic, determining whether to trust it, allow it, or block it. Mi...
Ask a question
Earn 20 points
 

Also Known As

No data available
RSA ECAT, NetWitness Network
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
ADP, Ameritas, Partners Healthcare
Find out what your peers are saying about Illumio Insights vs. NetWitness NDR and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.